high7.1

CVE-2024-27685

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload …

Impact

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables.

Affected products

Vendor	Product	Affected versions
Phpgurukul	Student Record System	Version 3.20

Weakness classification

CWE-89

References

NVD record
CVE.org record
https://medium.com/@cnetsec/a-sql-injection-vulnerability-exists-in-the-student-record-system-using-php-and-mysql-v3-20-df2c6fe7dc15
https://phpgurukul.com/student-record-system-php/